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Examples of Proofs by Recursion Induction 

by 

John McCarthy 


Recursion induction has turned out to have certain bug 3 
and some restrictions have to be imposed. The proofs given 

in the sections of my notes reproduced beloxtf probably vjill 

\ 

turn out to satisfy whatever restrictions have to be imposed, 

4. Recursion Induction. This is the main method for 
proving assertions about recursively defined functions. We 
state it as follows: 

Suppose f is a function defined by the equation 

* • • • f^^n) “ <E. 

where c is an expression which may contain f. Suppose that 

« 

we wish to prove that f(x*,...,x ) ha3 some property for 
those for which it is defined. Assume that f 

has the property for the arguments occurring on the right side 

i 

Cj >f the equation and prove on this hypothesis that it also has 


the property for the arguments x^. 


• • 


,x n* 


Then we may con- 


4 * j 

\ ihlude that f has the property for all arguments for which 
t is defined. 

Before Justifying the rule, we will give an example of 
its application. 

We define 

f (n,m,p). « (m » n -* p,T “♦ f (n v< ro+l, (m+l)p)) 

( 

where n,m, and p are .integers. We shall prove that for 
any n,m,p for which f(n,nj,p) is defined we have 

f(n,m,p) * p. 
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Proof by recursion Induction : 
We have assuming f(n,nM-l,(mfl)p) m 


(m * n ^,T ^ f (n,m+l, (ra+l)p)) 


ni 

mi 

(m^-n 


(m®n 


(m+l)p 

^ nS 
" rat 

’ ni 

♦-1 

ml * 


,7- 


n! 

TUi+jL'Ji 


(m+l)p) 


,T 


n* 

mT 


P) 


mi 

v;hich is the desired formula. Hence the theorem. 

Cne general reaction so proofs by recursion induction 
ss<sms to be suspicion. However, we shall justify the method. 

Let M be the class of n-tuplets x^,...,x for which 

f(x*, ...,x ) *» (£, is defined. We express it as the union of 
disjoint classes ..., etc. defined as follows, (x^ .. .,x ) 

is in M q if the evaluation of f(x 1# ...,x ) does not involve 
the evaluation of any f (y^,.. .,y n ). (in the example con¬ 

sists of the triplets (n,m,p) fo? which n »* m.) M. con¬ 
sists of those n-tuplets (x^,...,x ) for which the evalua- 
tion of f(x^,...,x ) involves the evaluation of at least 
one f(y 1# ...,y n ) with (y A ,...,y n )(l and all 

(y*,...,y ) which occur In M Q u,. •. ,uM k _^. 

Suppose now that the hypothesis of rtcurs-ion Induction 
Is satisfied. Then f (x* ,.. .,x n ) has the dosireo. property 

for (x., ...,x^) in Mq because the assumption made f 

■ ( . 

on the right side plays no role in computing f (x^,... ,:*> n ). 

< 

(In the example, transforming (m ■» n *■* p, etc.) to 

n | 

(m « n -» - mp - P, etc.) did not involve the induction hypo- 

i * 

theses.) This is the basis of a mathematical induction on k. 


r 
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Namely, suppose that for all (y*,... ,y M ) ^M n u,... ,uM,, a 

JL II w | 

^(yi/*»»/y n ) has the desired property. Then v;e assert that 
f(x.,...,x^ has the property for (x,,,...,x )6 l<5 k be¬ 
cause the- assumption made in the recursion induction is in- 

S 

volved in the proof only for (y^,...,y ) in This 

concludes the justification. 

The important point to remember about recursion in¬ 
duction is that it says nothing about whether f (x. ,... ,x fi ) 
is defined. 


5• Properties of the Functions of the Integers . In 

chapter 2, section 6 we defined soma of the elementary func¬ 
tions of the integers recursively. We shall now prove some 
of their properties. 

We defined 

(1) m+n * (n ** o “*■ m,T m*+n”) 

Theorem 5«i » m+0 ■ m 

Proof . m+0 * (0 « 0 -*■ m,T “* m*+0~) 

** (T m,T “* m f +0“) 

■ m 


/ 



Theorem 5»2 . (m+n) f » ra‘+n 

Proof. m*+n «« (n *« 0 m f ,T (m')*+n*) 




(n « 0 ^ m 8 , T “♦ (m 5 +n“)*) 


(n » 0 -+ m,T “*• m'+n"’)* 


* (m+n)' 



by sub¬ 
stituting 
m f for m 
in {!) 

recursion 
induction 
hypothesis 
with m* for 
m 

talcing the 

successor 

function 

out of the 

conditional 

expression 






Theorem 5*3 « 
Proof. - 


(m+n)+p (m+p)+n 

(m+n)+p « (n ~ 0 -* ra,T ~ > m'+nj+p 

“ (n « 0 -*■ m+p,T -*• (m'+n'J+p) 

“ (n *** 0 m+p,T “+ (m’+p)+n - ) 

» (n « 0 ~+ m+p,T (m+p)*+n - ) 
« (m+p)+n 


distribution 
of function 

recursion 

step 

Theorem 5*2 


Setting m =« 0 in Theorem 5*3 gives * 

( 0 +n)+p « (Q+p)+n 

so that if we had O+ra « m we would have commutativity of ad 
ditlon. In fact, we cannot prove 0+m » m without making 
some assumptions that take into account that v/e are dealing 
with the integers. For suppose our space consisted of the 
vertices of the binary tree where m* is the vertex just 
above and to the left and ra~ is the vertex just below and 

0 is the bottom of the tree, m+n can be 
defined as above and of course satisfies 
Theorems 5.1, 5.2, and 5.3 but does not 
satisfy 0 +m « m. 



We shall make the following assumptions: 

1. m 1 0 

2 . (m*)~ <=* m 

3 . (m / 0 )D ((m“)* « m) 

which embody all of Peano*s axioms except the induction 
axiom. 


Theorem 5«^ » O+n n 

Proof . O+n « (n «* 0 0,T 0 f +n“) 

• (n - 0 -* n,T — (O+n - ) 1 ) 
- (n - 0-*“ n,T ■*-»■ (n - )») 

«« (n *» 0 n,T -*■ n) 


Theorem 5*2 

induction hy¬ 
pothesis 

axiom 3 



Theorem 5*5 
Proof . 

Theorem 5»6 
Proof. 


«ie now have 


Theorem 5*7 
Proof . 

Theorem 5«8 
Proof. 


Theorem 5*9 
Proof. 


* 



m+n » n+ra 

By Theorems 5*3 and 5»^ as remarked above. 


(m+n)+p « ra+ (n+p) 
(m+n)+p *» (m+pj-wi 

* (p+m)+n 
« (p+n)+m 

* m+(n+p) 


Theorem 5*3 

Theorem 5*5 

Theorem 5*3 

Theorem 5-5 
twice 


some theorems concerning the product 
m/n » (n « 0 0,T ra+m*n”) 

ra *0 » 0 \ 

m*0 « (0 «* 0 0,T “+ m,m 0”) 

- 0 


0*n « 0 

0*n “ (n «• 0 0,T "** 0+0vn”) 

« (n » 0 0,T 0*n ) 

« (n « 0 ”*■ O r T “*• 0) 

* ■ • 

-0 


Theorem 5»^ 

recursion in 
duction hypo 
thesis 


m*n «« nvm 
mxn » (n 
- (n 

» 

« (n 


- (n 

- (m 


0 -+ 0,T m+mxn“) 

0 0,T “* m+nv m) induction 

0 “*■ 0,T “♦ m+(m « 0 “*■ 0, 

T ”♦ n~+n"V m“ )) 

0 “* 0,T (m • 0 -*• tn+0, 

T “*■ m+n"+n“x m”) 

0 -*■ 0,m « 0 -*■ 0,T -*■ (n'+n'+nVm')' 

0 ■"* 0,n * 0 “*■ 0,T -* (n“+n"+nVn’)') 



The steps can now be worked baclcwards with m and n Inter¬ 
changed, 

4 

Theore m 5,10 . ro*n* «* m+m*n 

Proof . nun* « (n 1 «• 0 -► 0,T -* m+m<(n*)") 

*• nH-m^n 

Theorem 5,11 . m^n+p) •* mn+mp 

Proof. m/(n+p) ** m(p 0 ■“* n,T "*■ n*+p ) 

«* (p « 0 mn,T ”*• m(n*+p“)) 

» (p *» 0 “+ mn.T “► mn*+tnp“) induction 

hypothesis 

« (p «* 0 -* mn,T “** mn+(m+tnp”) 

*» (p “ 0 “♦ mn,Tj“* mn+(p ** 0 “♦ 0, 

' T ~+ ra+rap“)) 

« (p « 0 “*• ran+mp,T “*■ mn+mp) 

« mn+mp 

» 

Theorem 5»i2 . (ron)p «« m(np) 

Proof . (mn)p - (p « 0 -► 0,T -*• mn+(mn)p") 

- (p » 0 -* 0,T -*■ mn+m(np“)) 
mx (p » 0 “*• 0,T “♦ m(n+np") 

% _ • 

« m(p « 0 -* 0,T -* n+np") 

- m(np) 


Tills proof is by induction on p. Induction on 
would also work. 

* 

We make the definition 

t 

n^n •• (m «■ 0)v'(n / 0)A(m 4 ri <) 


or n 


Theorem 5»^3» 04»n 

Proof. 04n « (0 ®» 0)V(n / 0)A(0 6 n ) 
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Theorom 
Proof. 


(m+p ^ n+p) « (m fe n) 


(m+p fe n+p ) « 

(P 

- 

0 -► 

m,T m^+p") 





(p «* 0 “*• n,T n*+p~) 


» c 

(P 

m 

0 -* 

m fen,T -*■ rn'+p”6 n 

•+p“) 

r 

M 

(P 

m 

0 -*■ 

m - n,T -♦ m* ^ n 1 ) 


m 

(P 

£3 

0 -► 

m - n,T -* (m l ** 0) 


■ 



(p* 

* 0)A((m* ; ^ (n' ) 

*) 

at 

(P 


0 “♦ 

mfe n,T “*■ rn fen) 


«- 

mS: 

n 





6. Properties of Functions of Symbolic Expressions . In 

this section we shall use recursion Induction to prove a num¬ 
ber of properties of functions of symbolic expressions. We 
start with the basic identities 

car[cons[xjy]] «• x 

1 * 

cdr[cons[x;y]] » y ^ 

atom[x}v[cons[car[x];cdr[x]] - xj 
■ /N atom[cons[xiy] ] 
null[x] m x[x - NIL] 

inhere in this section we use «• for equality of 3-expres- 
sions in general and not Just for atomic S-expressions. 

We shall write x*y for conc [x;y] and our first ob¬ 
jective is to prove that concatenation is associative, i.e. 


Theorem 6.1. [x*y]*z » x*[y*z] 

Proof . The definition of x*y can be written 

x*y « (null[x) y;T-*• cons(car[x};cdr[x]*y]] 

We have . (' 

null[x*y] » [null(x] “♦*null[y];T -*• null[cons[car[x);cdr(x]*y]]] 

- [nullfx] null[y];T “*■ P] 

- null[x]Anull[y] 


i 
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car[x*yj « [null[x] **► car[y];T car[cons[car[x];cdr[x] *y] ] ] 

« [null[x] “*■ car[yJ;T-* car[x]l 
cdr[x*y] » [null[x] cdr[y];T cdr[cons[car[x];cdr[x]*y)]1 

*• [nulltxj “*■ cdr[y] ;T "♦ cdr[x] *y] 

Now wo write 

[x*ylz * [nulltx^yz;T cons[car[x*y]jcdr[x*yj*z] ] 

« [null(x] -*■ [nullty] "**■ z;T cons[car[x*y];cdr[x»y]' t, zJ 3; 

T ~+ cons [ car [x'By};cdr[x*y]*zl] 

We substitute the above derived results for car[x*y] and 
cdr[x ,# y3 making use of the fact that the first occurrences of 
these quantities have null[x! as a premiss and the second oc¬ 
currences have—‘null[x] as a premise. Thus we get 
[x*y]*z » [null[x] -* [null[y] z;T~* cons[car[y];cdr[y)*z]]; . 

' T cons[carCx]j[cdr[x]' s y] - *zJ 

* [null[x] y*zjT “■*’cons[car[x];cdr[x]*[y*z J J ] 

« x*[y*z] 

Next we have 

Theorem 6.2 . NIL*x « x 

x*NIL » x 

Proof . NIL*x •» [null[NIL] x;T -* cons[car[NIL]; 

cdr[NIL3*xl] 

■ x 

x*NIL » [null[x] “*■ HIL;T “♦ cons[car[x]; 

cdr[x]*NIL]] 

« [null[xj x;T cons [car [x] ;cdr[x] ] ] 

«• [null[xj -*-x;T-* , x] 

* X 

* 

Next we consider $ function reverse defined by 
reverse[x] * [null[x] “*• NIL;T "♦ reverse[cdr[x]]*cons[car[x];NIL]3 
which reverses the order of terms in a list. 

V 

i \ 
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Thoorem 6.3 « reverse[x^J >« reversely]#reverce[x] 

Proof. . ' 

m " '“t** 1 * 

revGroefx^y] ** [null[x] “* reverse [y];T -♦ reverse[cons[car[x]; 
cdr[x]*y]]] 

• [nullfx] reverse(y];T -♦ [null[constcar[xj; 
cdr[x]*y]3 *■* NIL; Treverse[cdr[con3[car(x];cdr[x]*y]]]*cons[ 
car[cons[car[x];cdr[x]*y]];NIL]]] 

“ [nullfx] *"*■ reverse[y]«NIL;T -► reverse[cdr[ 
x]*y]*cons[car[x];NIL]] 

" [nullfx] "♦ reversely]«NIL;T -* reversely]* 
rever8e[cdr[x]]*cons[car[x3;NIL]] 

» reverse[y]*[null[x] -*• NIL;T -reverse[cdr[ 
x]*cons[car[x];NIL] ] 

, » reverse [y]*rever3e[x] 

Theorem 6.4 . reverse[reverse[xJ ] *« x 
Proof . v 

reverse(reverse[x] ] ** [nullfx] -*■ reverse [NIL] ;T “+ reverse! 

reverse!cdr[x]]*cons[car[x];NIL]3] 

* 

** [nullfx] "* NIL; T **♦ reverse [cons [car [ 
x];NIL]]*reverse! reverse!cdr[x]33] 

** [nullfx] -* x;T cons[carfx];NIL]*cdr[x]] 

« [nullfx] -*■ x;T -*■ cons[carfx];cdr[x] ] ] 

=» x 

* 0 * 

In chapter 2, we defined ,—^ atom Cm3 

equal[x;y] *• atomfx]Aatomfy]Ax «* yA'*&tom[>£]I\equal[cons[x3; 

car[y]Aequal[cdr[x];cdr[y]^ 

subst[x;y;z] =» [atomfz] r+ [z ** y x;T z];T cons[subsfc[x;y; 

car[z]]jsubst[x;y;cdr[z]]]] 

* ! 

We now define 1 

freefyjz] - [atom[z] -► z / y;T -*■ free[y;car[z] ] Afree[y;cdr[zJ ] ] 


t 

\ 
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Y/e have 

Theorem 6.5 « free[y;zj Dequal[sub3t[x;y;zl;zJ 
Proof. • 

free[y;z] Dequal[subntlx;y;z] ;z] [free{y;s] equolf 
3 ubat[x;y;zJ;z] jT T] 

u. [afcom[z] [freetyjz] ”♦ 

i 

equal[3ubst[x;y;z);z3;T *♦ T);T “♦ [free[y;z] equaltsub3t[x;y;«]; 
z];T-* T]3 

« [atoin[z] [z /* y *♦ 

equal[[z « y “*■ x;T z};z];T -* t 3;T -*■ [free[y;car[z33Afraety; 
cdr[z]1 "* equal[const3ubst[x;y;car[z]];subst[x;y;cdr[z 3 3 3 |T -* T]3 

e* [atom[z3 “*■ tz y “♦ 

equal[z;zJ;T T);T“* [free[y;car[z]]Afree[y;cdr[z33 “*■ equalt 
car[con3[subst[x;y;car[zJ 3jsubst[x;y;cdr[zJ 3 3 3;cartzJ 3Aequalt 
cdr[cons[3ubst[x;y;car[z}3;3ubsfc[x;y;cdr[z 3 3 3 3 ;cdr[z3 3;T “♦ Tj 

where we used the definition of eq ual and atom z and *'-atom[con3[u;v] 3 

e [atom[z3 *"*’ T;T [freety; 

car[z33Afree[y;cdr[z33 ”*■ equal[subst[T;y;car[zJ];car[z}3Aequalt 
subst[x;y;cdr[z3 3 ;cdr[z] 3 ;T T3 J 

w (a'comtz] “* T;T [freety; 

car[z]3Afree[y;cdr[z]J -** [free[y;car[zl “*• equal[subst[x;y;car[z33; . 
cartz!3;T -*• T}A[free[y;cdr[z31 ”*■ equal[subst[x;y;cdr[zl];cdr[z3 3; 

T -* T3;T -♦ T31 

»» [atomfz3 •* T;T -* [freety; 

carfz] 3Afree[y;cdr[z3 3 TAT;T “*113 

e* [atom[z3 T;T “*• Tj 

-T 

; / 

■ - / 

* #'' 

( 
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